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cDAiin-PRnOF KEY PHARD FOR A M AUTDMATIC RANKING TERMINAL 

FIELD OF THE INVENTION 
The present invention concerns a fraud-proof keyboard for an 
automatic banking terminal, suitable for preventing acts of fraud being 
5 perpetrated on the users of the terminal and comprising a plurality of keys, 
each of which represents a number and/or graphic symbol and nnay 
selectively be actuated in order to enter data in the terminal. In particular 
the keyboard is envisaged to prevent the actuations of its keys by the user 
being detected by outsiders in order to trace confidential user data, such 
10 as for instance the personal identification code (PIN) which, as is known, 
enables banking operations to be effected. 

BACKGROUND OF THE INVENTION 
A known system for fraudulently detecting the PIN of a user is that 
of laying a very thin sheet, practically imperceptible to the sight and touch 
15 of the user, but suitable for detecting the marks left by his fingers during 
the entry of data. Once the banking operation has been concluded by the 
user, the sheet is lifted off the keyboard and the marks innpressed thereon 
used to trace the PIN. 

Another possible means of fraud is that of concealing a telecamera 
20 in the vicinity of the keyboard in order to film the movements of the user's 
fingers when entering personal data, and thus tracing the user data by 
subsequently analysing the movements filmed. 
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In state-of-the-art keyboards, the keys are indicative of numbers 
and/or symbols permanently associated therewith, so that the data typed 
are easy to detect using the systems described above. 

SUMMARY OF THE INVENTION 
5 The object of this invention is the provision of a device that is 

extremely effective against fraud of all types and in particular the types 
described above, and which in addition is also easy to install, at low cost, 
including in banking terminals already in operation. 

This object is achieved by the fraud-proof keyboard according to the 
10 present invention which, in accordance with a first embodiment, has the 
characteristics defined in claim 1. According to another aspect of the 
invention, the fraud-proof keyboard may have another embodiment, the 
characteristics of which are defined in claim 7. 

In particular, the first embodiment is suitable for being installed 
15 without distinction in terminals located in attended or unattended 
environments, being effective in avoiding fraud by way of telecameras and 
by way of the sheet laid over the keyboard. 

The further embodiment, on the other hand, is especially suitable for 
being installed in banking terminals located in attended environments, 
20 where it is possible to perform fraud only by way of the sheet laid over the 
keyboard, it being practically impossible to install telecameras in an 
attended area. 
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BRIEF DESCRIPTION OF THE DRAWINGS 
These and other characteristics, scopes and advantages of this 
invention will become apparent in the course of the following description of 
some of the preferred embodiments, provided as a non-exhaustive 
5 example, taken in conjunction with' the accompanying drawings, where: 

Fig 1 is a perspective view of an automatic banking terminal in which a 
fraud-proof keyboard according to the invention is installed; 
Fig. 2 is a plan view of a first embodiment of the keyboard according to 
- the present invention; 
10 Fig. 3 is a partial section according to the line Ill-Ill of Fig. 2; 
Fig. 4 is a functional block diagram of the keyboard of Fig. 2; 
Fig. 5 is a diagram illustrating operation of the keyboard of Fig. 2; 
Fig. 6 is a partial sectional view of a second embodiment of the keyboard 
of Fig. 2; 

15 Fig. 7 is a functional block diagram of the keyboard of Fig. 6; 

Fig. 8 is a plan view of a further embodiment of the keyboard according to 
this invention; 

Fig. 9 is a partial sectional view of the keyboard of Fig. "8; and 
Fig. 10 is a diagram illustrating operation of the keyboard of Fig. 8. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 
With reference to Fig. 1, an automatic banking terminal 10, more 
generally known as an ATM - the abbreviation of Automatic Teller 
Machine, incorporates a fraud-proof keyboard 1 1 according to the present 
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invention. The keyboard 11 is mounted on a fixed structure 12 of the 
terminal 10 and is associated with a series operating units of the latter- 
named, such as for example a display 13, a reader 14 of personal cards, a 
device 16 for issuing receipts and a cash dispenser unit 15, enabling a user 
5 to perform a banking operation through the said terminal 10. 

In particular, before any generic banking operation, the user is 
enabled to effect the operation by introducing a personal card in the reader 
14 and typing his PIN on the keyboard 11. If the data read by the reader 
14 on the personal card and the PIN data typed are correct in the sense 
10 that both match with data stored within the terminal 10, then the user is 
enabled to effect the operation desired. 

With reference to Figs. 2-4, the keyboard 11 comprises a support 
case 21, a front 23 arranged on a side of the keyboard 1 1 facing the user, 
a plurality of keys 24 actuated by a user for entering data in the terminal 
15 10, an electronic circuit 26 arranged under the keys 24, and an output line 
27. On each actuation by the user, each key 24 generates a corresponding 
actuation signal SI, designed to be received by the electronic circuit 26. 
The latter in turn processes the actuation signals SI of ^the keys 24 before 
generating corresponding output signals 82 indicative of the data entered 
20 by the user. A line 27 is provided for transmitting the signals 82 to the 
outside of the keyboard 1 1 towards computing units of the terminal 10. 

Both the case 21 and the front 23 possess a particularly robust 
structure to protect the exterior and interior of the keyboard 11 against 
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e.ect,onlc cUcu. 26 is divided into a .a.n ecu,. wh.ch 

■ =11 aenerated by the keys 24, and a 
B directly receives the actuation signals SI general 

• ^ ..nits of the banking terminal 10. For tnis pu h 
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The keys 2. are associated with a plurality of numbers ar.a/or 
,.phic sy.Ms 2S. each o. which is represented on a corresponding .ey 
to indicate the data that it is possible to input and enter in the ter...na. 
,5 10 bv actuating the key in question. 

..cording to one characteristic o, the invention, the key^ard . . .s 
p.vided With .eans suitable .or rando.lv varying, between two 
Lcessive banking operations, the numbers and/or sy.bos 
lntedonthekeys2.sothatthe.arks,enbythe,ingerso.a.ser 

Tsheet .id above the keyboard U tor fraudulent designs, do not 
::::ai,ing deter— 0, the nu.bersan.^^ 

typed by the user. 
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More specifically each key 24 comprises a luminous matrix 31 of 
known characteristics, also known as a -digif, which consists of a 
plurality of elements that are selectively lit to represent the numbers and/or 
graphic symbols 25. The matrices 31 are mounted on a support board 33 
5 connected with the main circuit 28 and bearing appropriate circuits for 
electrical power supply of the matrices 31. 

The matrices 31 are apt to be driven by the main circuit 28 for 
varying, between two successive banking operations, brightness of the 
respective illuminating elements, so that the numbers and/or graphic 
10 symbols 25 represented on the matrices 31 change according to a random 
law, but in such a way that, on each variation, all the numbers and/or 
symbols 25 needed for data entry still appear in their entirety on the 
various keys 24. It will therefore be clear that the keyboard 11 is suitable 
for presenting, during a generic banking operation, a different and 
15 unpredictable arrangement of the numbers and/or symbols 25 on the keys 
24 with respect to the arrangement presented during the preceding 
banking operation. 

In ways that are widely known and used in the sector art, the 
random variation of the numbers and/or symbols 25 represented on the 
20 keys 24 may be obtained by means of a specific circuit, integrated in the 
electronic circuit 26 and of a type capable of generating random numbers. 

Each key 24 further comprises a piezoelectric element 32 arranged 
above the luminous matrix 31 and suitable for generating, through the 
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effect of pressu. applied by the user, t.e signa. S1 in«. actuation of 
,.e .ev in question. The — piezoeiect-ic eie.ents 32 are supported 
.V a Sheet 3S. and each possesses a crown shape around a ho.e in the 
Sheet 36 with the purpose of pern^tting observation by the user of the 
S number or symbol displayed by the matrix 31. 

^ flexible Plate 36. arranged on top of the sheet 35 on the external 
face of the keyboard 11, is provided with transparent areas in 
correspondence with the luminous matrices 31 to permit observation of the 
■ ,elative numbers and/or symbols 25 and is sufficiently thin so as to bend 
,0 and transmit the pressure of the user to the different piezoelectric elements 
32 underneath in order to activate them. 

A cable 37 connects the sheet 35 with the electronic circuit 26 for 
transmission to the latter of the actuation signals SI . 

The electronic circuit 26 is also provided with circuits associating the 
,s actuation signals SI generated by the piezoelectric elements 32 with the 
ambers and/or graphic symbols 25 represented on the Keys 24 a. the time 

input by the user. 

operation of the Keyboard 1 1 described thus far is as follows. At the 
ao start of each new banking operation, the user inserts his personal card in 
,He reader 14. When the terminal 10 verifies presence of the card, the 
electronic circuit 26 drives (phase 41 in Fig. 5, the luminous matrices 31 
so as to vary according to a random law the numbers and/or symbols 25 
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represented thereon, so that the latter adopt a completely unpredictable 
disposition from the one they had during the previous banking operation. 
At this point, the user types his data (phase 42) by pressing the various 
keys 24, and the piezoelectric elements 32 relative to each of the keys 
5 pressed generate corresponding actuation signals SI which are received by 
the electronic circuit 26. The latter associates {phase 43) the actuation 
signals received with the effective disposition of the numbers and/or 
symbols 25 on the keys 24 at that time, in order to ascertain the data 
effectively input by the user. These data are then transferred to outside the 
10 keyboard in encrypted form by means of the output signals S2 transiting 
on the line 27. 

A second embodiment of the fraud-proof keyboard, indicated with 
the numeral 1 1 1 and illustrated in Figs. 6 and 7, comprises a support case 
115, a substantially transparent, tactile type screen 112, a display unit 113 
15 arranged under the screen 112, and a main electronic circuit 126. 

The screen 1 12, of known characteristics and of the type commonly 
called touch screen, is provided with tactile properties so that, when 
touched at any point of the surface, it generates a corresponding contact 
signal S3. Further, the screen 112 is provided with a grid suitable for 
20 conveying the contact signal S3 thus generated to a suitable recognition 
circuit, integrated in the circuit 126, suitable for recognizing exactly which 
zone of the surface of the screen 1 12 has been touched. 
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3_.iae«ct,v on the areas 114 With the numbers and.rsv..ols 
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as represented thereon at that tin.e. so that the data effectively ,nput hy 
,he user n,ay be ascertained and entered in the tern.inaMO. 

P,,s 8 and 9 represent a further e.bodi.ent of the fraud-proof 
,0 Keyboard, indicated .enerica.iy by numeral 21 1 . It consists of a 
lentional type Keyboard body 212. provided With Keys 22. ar,d a 

outer surface of the keys 224. 
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in further detail, the device 213, elso called wave conveyor, 
comprises a transmitter 214 emitting sound waves 215 of predefined 
characteristics and a receiver 216 suitable for receiving these waves and 
measuring the characteristics thereof. The transmitter 214 and the receiver 
5 216 are arranged one in front of the other on opposite sides of the 
keyboard 211 so that the waves emitted by the transmitter 214 are 
conveyed along the surface of the keys 224 to the receiver 216. 
Operation of the keyboard 213 is as follows. 

At the beginning of each banking operation, the device 213 during 
10 phase 231 (Fig. 10) verifies if the characteristics of the waves 215 
received by the receiver 216 are conforming to the predefined 
characteristics of the waves emitted by the transmitter 214. If they are 
conforming, the keyboard 21 1 prepares to receive the user data so that the 
banking operation may be duly effected. During the time required for the 
'5 operation, the device 213 is disabled in order to avoid the device 213 
unduly signalling a change in status of the surface of the keys 224 on 
account of the keys pressed by the user. 

If they are not conforming, the keyboard 21 1_ informs the user 
(phase 232), for example by posting a suitable message on the display 13, 
20 that surface conditions of the keys 224 have been altered from their 
normal conditions and that action must be taken to remove the reason for 
this alteration. At the same time, the keyboard 21 1 is disabled, so that the 
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use, can no .onger continue effecting the banking operation. This bar 
remains until such time as the cause of the alteration is removed. 

,t is obvious that various changes and/or improvements may be 
„ade to the fraud-proof keyboard corresponding to the preferred 
s embodiments described in the foregoing, without exiting from the scope of 
the present invention. 
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CLAIMS 

1 - A fraud-proof keyboard (11; 111) for an automatic banking terminal 
(10), comprising 

a plurality of keys (24), each of which represents a number and/or 
5 graphic symbol (25) and is provided for being selectively actuated in order 
to enter data in the terminal (10), 

characterised by electronic variation means (26, 31; 126, 113) for 
varying the number and/or symbol (25) represented on each of said keys 
(24). 

0 2 - A keyboard (11; 111) according to the claim 1, wherein each of said 
keys (24) is suitable for generating a corresponding electric actuation 
signal (51; S3), and wherein an electronic circuit (26; 126) is provided for 
receiving said electric actuation signal (81; S3), characterized in that said 
electronic circuit (26; 126) is suitable, when a generic key (24) is actuated, 

1 for associating the corresponding actuation signal (Si; S3) with the 
number and/or graphic symbol (25) represented on said generic key (24), 
whereby the datum corresponding to the number and/or graphic symbol 
represented on said generic key (24) is entered in said terminal (10). 

3 - A keyboard (11; 111) according to either claim 1 or 2, characterized in 
that said electronic variation means comprise a luminous matrix (31) for 
each of said keys (24) and in that each luminous matrix (31) Is suitable for 
lighting variably between two successive banking operations, in order to 
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corresponding key (24). 

4 A keyboard according to the claim 3. characterized by the fact that 
each of said keys (24, comprises a piezoeiectric e.ement (32, for 
,er,erating said actuation signa. (S1,, by the fact that the piezoeiectric 

p-,ezoe.ectric e.ements (32, is associated with a transparent area of said 
Sheet (35, to perm« observation of the number and/or symbo. represented 

0 on the respective key. 

5 - A keyboard according to the Caim 2. characterized by the fact that said 

of areas ,114, each of which defining a corresponding key, by the fact that 

said areas (114, is suitabie for representing a d^erent number and/or 
graphic symbol (25, between two successive banking operations. 
6 - A keyboard (11; 111) according to either claim 1 or 2, characterized by 
fact that said eiectronic variation means comprise random number 
,0 generating means, so that the numbers and,or symbols represented on said 
Keys vary randomly between two successive banking operations. 
7 . A fraud-proof keyboard (211, for an automatic banking terminal (10). 
comprising a plurality of keys ,224,. each of which represents a number 
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and/or graphic symbol (25) and may selectively be actuated in order to 
enter data in the terminal, 

characterized by having a wave conveyor type device (213) for 
signalling an alteration of the surface state of said keys (224) between two 
5 successive banking operations. 
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